Live data from Hacker News

Grand Theft Auto V exploit assigned CVE number due to partial RCE

cve.mitre.org

41–42 of 42 posts

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#41
post #9

These games have tens of millions of lines of code (often building on top of the older components). They are also written in memory unsafe C++, by developers focused on features and rapid sales, to users that look forward to new features not better security. I won’t be surprised at all if they are filled with vulnerabilities.

Uhhh, GTA V has been known for bad security for a long time. Streamers can't even play the game without a VPN or they get their IP leaked. Single-player games can (could, maybe still can? I am unsure of the current state of the game) get hacked and be messed with by hackers. This goes far beyond just "they used C++." This shows a great lack of caring for security in general from Rockstar, not just another thing that you can use to prove to yourself that "C++ is dangerous!"

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#42
post #15

GTA V has averaged >100k concurrent players on steam for the last 3 years, so a RCE has a lot of potential targets ripe for exploitation.

It only needs to make it into a mod-menu to get wide, unsuspecting distribution. For those curious, mod menus are what "hackers" use to exploit the gameplay for fun. Script-kiddies are a good analog in history. They're often just kids who googled GTA hacks and installed from the first page they thought looked cool. They'll be prime targets for distribution.

Just like script-kiddies back in the day, the easiest vector of attack is to distribute infected “hacking” tools
Post reply on HN